Skip to main content
govconCyber — Federal Cybersecurity Law Reference
Back to results
NIST 800-171 R-3.14.1

Identify and Correct Flaws Timely

Official citation: 3.14.1

Class: core · Severity: critical

Statement of the obligation — verify against source

3.14.1

What it means

Identify, report, and correct system flaws promptly, tracking newly disclosed vulnerabilities and applying patches and fixes within timeframes driven by risk. Timely flaw remediation closes the gaps attackers most often exploit.

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.